Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
File: 4C30F356A42511EBA9C0C16FF8AEA228.roa (raw, json)
Hash identifier: +r1vFZ4wLR/R9jZwfztH3ARVY+o8bHcYX/dgE1HC2D0=
Subject key identifier: 77:F2:7B:1C:AC:95:6D:D9:FF:A0:8F:B3:DC:A2:0A:D8:B6:98:4E:B6
Certificate issuer: /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial: 04
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
Signing time: Fri 23 Apr 2021 11:16:06 +0000
ROA not before: Fri 23 Apr 2021 11:16:00 +0000
ROA not after: Tue 30 Apr 2030 11:16:00 +0000
asID: 328839
IP address blocks: 2c0f:4600::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Validity
Not Before: Apr 23 11:16:00 2021 GMT
Not After : Apr 30 11:16:00 2030 GMT
Subject: CN=6082ac76-c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:51:2d:ad:1d:80:09:71:d5:79:0f:4e:e7:
43:6d:18:ac:56:54:f8:02:77:99:a4:ac:be:9b:38:
cc:c7:9f:45:a9:e9:9c:55:f4:15:3c:d9:37:5c:cd:
4d:3a:c5:31:3d:0b:b1:46:73:e6:7b:a5:aa:65:aa:
ad:f4:b8:73:dc:c6:b3:61:de:90:a2:1a:6c:ae:44:
27:6e:37:85:5b:ae:21:ab:09:3e:e7:8d:cc:76:84:
92:b8:e1:e2:66:ad:ee:a5:0d:ae:ea:6f:db:55:27:
fc:31:95:12:c6:0a:95:ec:ac:2b:bd:6c:31:3f:03:
16:b9:43:29:37:06:d9:e5:de:cf:74:7b:f5:67:0d:
23:54:79:f7:e9:5f:ea:d0:9e:fd:80:ea:5c:7c:b4:
da:90:d5:ce:b9:5f:92:4b:8b:5d:25:3f:53:5e:6f:
51:e5:fa:c3:ee:ea:ce:43:86:66:a8:65:69:78:a1:
d1:4d:0c:4d:0d:15:e2:7a:a0:bf:11:e8:cf:3b:ee:
2a:88:96:8c:50:75:cd:c0:73:ca:c6:2d:23:8c:e6:
01:67:9c:5d:c6:89:85:c6:b6:cb:7c:0b:7b:b7:73:
5e:56:9d:8d:43:c9:08:48:51:2b:f7:eb:c6:7b:bf:
c4:7e:ea:d8:3c:83:1d:d0:49:f1:77:ad:2f:c6:47:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:7B:1C:AC:95:6D:D9:FF:A0:8F:B3:DC:A2:0A:D8:B6:98:4E:B6
X509v3 Authority Key Identifier:
keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:4600::/32
Signature Algorithm: sha256WithRSAEncryption
79:e0:57:f9:29:ff:a7:eb:d9:d9:a6:a5:bc:26:b4:e9:e0:54:
9e:79:de:96:df:7b:ff:0c:37:85:4f:9a:21:e1:49:fc:6e:e8:
72:d4:3a:a1:40:68:1e:63:3d:23:e0:2f:b5:ac:97:51:61:1f:
3c:f5:9d:08:a6:6c:cb:81:e9:c0:07:cb:70:67:91:fc:04:a6:
ae:43:1b:f9:85:69:6b:65:a3:66:2b:4d:82:8e:ea:00:9c:50:
22:b6:b0:82:80:ff:6c:4a:6e:11:e5:f7:2b:94:f4:8d:1c:3e:
44:20:44:2b:a7:d2:a0:08:41:dc:6c:64:42:92:94:f2:3a:92:
70:1a:59:af:6d:df:33:13:32:b1:5f:56:9f:c6:68:8a:54:4b:
b8:c8:0c:46:bf:4c:0b:bd:fd:d2:53:7e:34:34:8a:d8:fc:08:
79:be:98:10:04:a4:c4:e5:2b:2c:88:98:cc:58:49:7d:a1:95:
32:e3:55:c2:c3:a9:69:49:31:8e:6f:6c:89:0a:7d:f1:8e:3f:
e9:9a:02:62:0f:27:bd:d3:06:2f:e5:2f:79:7d:08:20:57:22:
9f:09:fa:f3:b2:dd:39:4c:01:74:6d:f5:58:7c:15:da:97:b9:
fe:7c:51:48:31:23:34:30:f1:1b:96:b6:04:8b:40:88:81:85:
57:8d:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org